Site logo

     


Advert.
Switch to full style
Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.
Post a reply

ggmaile.com

Mon Jun 05, 2017 3:13 pm

Split from viewtopic.php?f=11&t=36477&start=40

ggmaile.com - is an email only domain, impersonating Gmail

Fake site details - https://db.aa419.org/fakebanksview.php?key=124321:

IP: 185.26.122.57

Domain Name: GGMAILE.COM
Updated Date: 2017-05-31
Creation Date: 2017-03-31
Registrar Registration Expiration Date: 2018-03-31
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Sergey V Nikiforov
Registrant Street: ul.Myasnitskaya, 22, kv.38
Registrant City: Moskva
Registrant State/Province: russia
Registrant Postal Code: 101000
Registrant Country: RU
Registrant Phone: +7.4995302087
Registrant Email: nikifuuch@yandex.ru

The same registrant was impersonating not only gmail...

He had a qukmail.com, an email only domain, impersonating ukmail.com, no longer active.

Also maliyaho.com - email only domain, impersonating yahoo.com, no longer active.

Update - the fake site is on client hold now - the scammer will be unable to use it anymore for sending emails.

padovka.com

Mon Jun 05, 2017 5:06 pm

Split from viewtopic.php?f=11&t=58233

padovka.com is a fake site created only for the email address. The scammer is spoofing karyer-padovka.ru, the domain of a real company in Samara, Russia, where the fake character pretends to be working.

From the fake site details:

IP: 31.31.196.146

Domain name: PADOVKA.COM
Updated Date: 2017-03-24
Creation Date: 2017-03-24
Registrar Registration Expiration Date: 2018-03-24
Registrar: Registrar of domain names REG.RU LLC
Registrant Name: Protection of Private Person

The registrant is using the privacy protection given by the registrar to hide his identity.

postservise.net

Sat Jun 24, 2017 1:19 am

split from https://www.scamsurvivors.com/forum/vie ... 11&t=36477, where the fake domain is used only for the email address.

The scammer fake persona use this domain after the previously used one - ggmaile.com got suspended.

Fake site details: https://db.aa419.org/fakebanksview.php?key=124658

IP: 185.26.122.14

Domain Name: POSTSERVISE.NET
Updated Date: 2017-06-16
Creation Date: 2017-06-16
Registrar Registration Expiration Date: 2018-06-16
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Vitaliy V Ponomarev
Registrant Street: Vesennyaya, 15, kv. 19
Registrant City: Borisovka
Registrant State/Province: Russia
Registrant Postal Code: 309340
Registrant Country: RU
Registrant Phone: +7.9328965179
Registrant Fax: +7.9328965179
Registrant Email: ponomarevvitaliy296@yandex.com

Translated: even if the name, email address or location is not the same as the ones used for ggmaile.com, the registrant phone number is the same.

Note: the site got suspended.

guardmail.com.ru

Fri Jun 30, 2017 7:45 pm

split from viewtopic.php?f=11&t=36477&start=50,where the email address using this fake domain is reported.

Fake site details:

IP: 185.26.122.58

domain: GUARDMAIL.COM.RU
nserver: ns.hostland.ru
nserver: ns3.hostland.ru
state: REGISTERED, DELEGATED
person: Private person
e-mail: SavelevAleksey152@yandex.ru
registrar: RU-CENTER
created: 2016.10.14
paid-till: 2017.10.14
source: RU-CENTER

rusinet.in

Sat Jul 01, 2017 12:10 am

split from viewtopic.php?f=11&t=59350, where the domain is reported for being used in scam only for the email:

Fake site details:

IP: 94.242.206.131

From the fake site details:

Domain Name:RUSINET.IN
Created On:28-Dec-2016
Last Updated On:26-Feb-2017
Expiration Date:28-Dec-2017
Sponsoring Registrar:Endurance Domains Technology Pvt. Ltd. (R173-AFIN)
Registrant ID:EDT_63255336
Registrant Name:Fedor Petrov
Registrant Street1:Almatinskaya
Registrant City:Moskva
Registrant State/Province:Marino
Registrant Postal Code:121000
Registrant Country:RU
Registrant Phone:+7.9193652248
Registrant Email:grizly.good@hotmail.com

There was also a ukra.net.in, using the same phone number of the registrant, no more active.

The same email address of the registrant was used back in 2015 for myhotml.com - impersonating hotmail, no more active. And ilrus.com - also dead now.

dugmail.com

Sat Jul 01, 2017 11:22 pm

Split from https://www.scamsurvivors.com/forum/vie ... 7&start=60 & viewtopic.php?t=48666, where the domain is reported used only for the email address.


Fake domain details - https://db.aa419.org/fakebanksview.php?key=124899:

IP: 185.26.122.4

Domain Name: DUGMAIL.COM
Updated Date: 2017-05-25
Creation Date: 2015-05-21
Registrar Registration Expiration Date: 2018-05-21
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registry Registrant ID: Not Available From Registry
Registrant Name: Fedor S Nikiforov
Registrant Organization:
Registrant Street: ul. Kiseleva, 40, kv 12
Registrant City: Saratov
Registrant State/Province: russia
Registrant Postal Code: 410012
Registrant Country: RU
Registrant Phone: +7.8452271418
Registrant Fax: +7.8452271418
Registrant Email: lopikas-salomon@rambler.ru

History of the domain:

Date Status Name Server
2017-05-25 Transferred to hostland.ru
2017-05-22 Transferred to foundationapi.com
2016-05-26 Transferred to hostland.ru
2016-05-21 Transferred to foundationapi.com
2015-06-09 Transferred to hostland.ru
2015-06-06 Transferred to suspended-domain.com
2015-05-21 New hostland.ru
2015-03-15 Deleted foundationapi.com
2015-02-01 Transferred to foundationapi.com
2013-02-22 Transferred to cassamine.com

Update: The fake site was suspended by the registrar.

list-bk.com

Sun Jul 02, 2017 1:04 am

split from https://www.scamsurvivors.com/forum/vie ... 11&t=59172, where the domain is reported for being used in a romance scam (email only).

From the fake site details - https://db.aa419.org/fakebanksview.php?key=124909:

IP: 185.26.122.14

Domain Name: LIST-BK.COM
Updated Date: 2017-06-16
Creation Date: 2017-06-16
Registrar Registration Expiration Date: 2018-06-16
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Vladislav I Zorin
Registrant Organization:
Registrant Street: ul.Admirala Lazareva, 24, kv.45
Registrant City: Moskva
Registrant State/Province: Moskovskaya Oblasti
Registrant Postal Code: 113623
Registrant Country: RU
Registrant Phone: +7.9456171247
Registrant Fax: +7.9456171247
Registrant Email: vlad214578@yandex.com

Update: - the fake site is now suspended.

ckxufm.com

Thu Jul 06, 2017 5:50 pm

Split from viewtopic.php?f=11&t=59486, where the fake site is reported for being used in scam - email only domain.

Details of the fake site:

IP: 192.64.119.72

Domain name: ckxufm.com
Updated Date: 2017-05-05
Creation Date: 2017-05-05
Registrar Registration Expiration Date: 2018-05-05
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Domain Status: addPeriod
Registry Registrant ID:
Registrant Name: WhoisGuard Protected

The registrant is using the privacy protection given by the Registrar to hide his identity and location.

jmxmail.com

Sat Jul 08, 2017 2:12 am

Split from viewtopic.php?f=11&t=59172

The domain jmxmail.com is used only for the email, spoofing gmx.com.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125075:

IP: 185.26.122.57

Registrant Name: Anna n CHuvashina
Registrant Street: ul. Rozanova, 6str7, kv.56
Registrant City: Moskva
Registrant State/Province: russia
Registrant Postal Code: 123007
Registrant Country: RU
Registrant Phone: +7.4957929911
Registrant Fax: +7.4957929911
Registrant Email: ko.elenako@yandex.com

link-tm.com

Sat Jul 08, 2017 2:15 am

The same person registering the previously reported fake site is also the creator of link-tm.com, another domain used only for the email address in Russian romance scams.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125076:

IP: 185.26.122.57

Registrant Name: Anna n CHuvashina
Registrant Street: ul. Rozanova, 6str7, kv.56
Registrant City: Moskva
Registrant State/Province: russia
Registrant Postal Code: 123007
Registrant Country: RU
Registrant Phone: +7.4957929911
Registrant Fax: +7.4957929911
Registrant Email: ko.elenako@yandex.com
Post a reply